JP2000092123A - Method and device for communication flow priority control utilizing computer user information and recording medium with communication flow priority control program utilizing computer user information recorded therein - Google Patents

Abstract

PROBLEM TO BE SOLVED: To exactly perform communication flow priority processing, while utilizing every user information, even when one computer is to be utilized by plural users. SOLUTION: For this communication flow priority control method, the user information for each computer terminal is set to a packet transmitted from each computer terminal by a host agent 3 arranged at each computer terminal 1 and sent out, each sent packet is received by a LAN arbiter 5, each packet is certified based on the user information set to each packet, respective packets are classified based on the user information and set to the queue for each user, and based on the communication flow priority of respective packets from a policy server 7 with the basis on the user information of respective packets, each packet is successively extracted from the queue to be sent out to an external line 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an external line and an Internet service provider (IS) from each computer terminal.
P) A communication flow priority control method and apparatus using computer user information that preferentially controls a communication flow to the Internet via user information based on user information, and a communication flow priority control program using computer user information. It relates to a recorded recording medium.

[0002]

2. Description of the Related Art At present, many companies have networked computer environments and are connected to the Internet. These companies have an outbound line to Internet service providers that provide a point of connection to the Internet. Recently, the increase of users in the network,
Due to an increase in communication flows through the WWW (World Wide Web) and the like, the burden on external lines for connecting to the Internet tends to increase. The congestion of external lines for connecting to the Internet poses significant problems, such as impairing communications that are important to the organization. Therefore, as a means for solving this problem, it is conceivable to preferentially flow a specific communication flow.

At present, there are several communication flow control devices for the purpose of prioritizing communication flows. These are located at locations where communication is congested in the network,
Priority processing is performed by delivering packets flowing in each communication flow in a predetermined order. A communication flow control device for the purpose of priority processing of a specific communication flow includes an identifier (IP address) of a computer used for IP (Internet Protocol) communication and a specific number (application port number) unique to the IP communication. Priority control of the communication flow is performed using such information.

In the conventional communication flow priority control method, priority processing is performed by designating an IP address, so that users use different computers (that is, different IP addresses).
When using the address calculator), there is a problem that the priorities are different.

[0005] At present, there are several methods for giving priority to a communication flow by using information of a computer user.
These implement priority processing using a method of registering user information of each computer in a database of a server that centrally manages the information.

[0006]

The above-mentioned conventional method has the following problems.

[0007] 1. One-to-one correspondence between the user and the IP address of the computer is performed in the database part. Therefore, 1
In the case where one computer is used by a plurality of users, it is not possible to specify which user the packet output from the computer belongs to.

[0008] 2. If each computer cannot access the central management database, the priority control of the communication flow does not work well.

3. For example, when the account name of each computer is used as the user information, the same account name is required for all computers. Therefore, the priority control of the communication flow does not work well unless the user information is managed in a unified manner.

[0010] The present invention has been made in view of the above,
The purpose of the communication flow is to use computer user information so that even if a single computer is used by a plurality of users, communication flow priority processing can be performed accurately using each user information. An object of the present invention is to provide a recording medium recording a priority control method and apparatus and a communication flow priority control program using computer user information.

[0011]

In order to achieve the above object, according to the present invention, there is provided a communication system which preferentially controls a communication flow from each computer terminal to the Internet via an external line and an Internet service provider. A flow priority control method, wherein user information of each computer terminal is set and transmitted in each packet transmitted from each computer terminal connected to the external line, and the user information set in each packet is transmitted. The communication flow priority of each packet sent to the external line is determined based on the above, the user information is set, each packet transmitted from each computer terminal is received, and the user information set in each packet is Authenticates each packet based on which user the packet is sent from, and classifies each packet based on the user information to identify each packet. And sets in the queue, and summarized in that transmits the external line is taken out from the queue each packet in turn based on the communication flow priority of each packet is determined based on the user information for each packet.

According to the first aspect of the present invention, the user information of each computer terminal is set and transmitted in each packet transmitted from each computer terminal, and each transmitted packet is received, and each packet is received. Authenticates each packet based on the user information of each user, classifies each packet based on the user information, sets each packet in a queue for each user, and uses each packet. In order to take out each packet from the queue in order based on the communication flow priority of each packet based on the sender information and send it to the outside line,
Without the need for a traditional centralized database,
Even when a single computer is used by a plurality of users, communication flow priority processing can be properly performed using each user information.

[0013] The present invention described in claim 2 provides the present invention in claim 1.
In the described invention, when user information is not set in the packet or when the authentication fails,
The gist is to set the packet in a default queue.

According to the second aspect of the present invention, when no user information is set in the packet or when the authentication fails, the packet is set in a default queue.

Furthermore, the present invention according to claim 3 is a communication flow priority control device for preferentially controlling a communication flow from each computer terminal to an external line and the Internet via an Internet service provider, wherein the external line is controlled. A host agent which is arranged in each computer terminal connected to, sets and transmits user information of each computer terminal to a packet transmitted from each computer terminal and transmits the packet based on the user information set in each packet. A policy server that determines a communication flow priority of each packet transmitted to an external line; and a network in the LAN, which is disposed in a congested portion, receives each packet transmitted from the host agent, and sets each packet. It identifies which packet each packet was sent from based on the user information And, and sets the queue for each user to classify each packet based on the user information, receiving the communication flow priority of each packet from the policy server, based on the user information for each packet,
The present invention has a LAN arbiter for sequentially taking out each packet from the queue based on the priority and sending the packet to an external line.

According to the third aspect of the present invention, user information of each computer terminal is set and transmitted in a packet transmitted from each computer terminal in a host agent arranged in each computer terminal, and this transmission is performed. Each packet is received, and based on the user information set in each packet, each packet is authenticated as to which user the packet is sent from, and each packet is classified based on the user information. Each packet is set in the queue for each user, and each packet is taken out of the queue in order based on the communication flow priority of each packet based on the user information of each packet and sent out to the outside line. To properly perform communication flow priority processing using each user information even when one computer is used by multiple users without the need for a database It can be.

According to a fourth aspect of the present invention, when the user information is not set in the packet or when the authentication fails, the packet is set to a default queue. The gist of the present invention is to have a control means for performing the control.

According to the present invention, when the user information is not set in the packet or when the authentication fails, the packet is set to a default queue.

According to a fifth aspect of the present invention, there is provided a recording medium storing a communication flow priority control program for preferentially controlling a communication flow from each computer terminal to the Internet via an external line and an Internet service provider. The user information of each computer terminal is set and transmitted in each packet transmitted from each computer terminal connected to the external line, and transmitted to the external line based on the user information set in each packet. The communication flow priority of each packet is determined, the user information is set, each packet transmitted from each computer terminal is received, and based on the user information set in each packet, Authenticates whether a packet is sent from a user, classifies each packet based on the user information, and places it in a queue for each user. With a constant, and summarized in that transmits the external line is taken out from the queue each packet in turn based on the communication flow priority of each packet is determined based on the user information for each packet.

According to the fifth aspect of the present invention, user information of each computer terminal is set and transmitted to each packet transmitted from each computer terminal, and each transmitted packet is received, and each packet is received. Authenticates each packet based on the user information of each user, classifies each packet based on the user information, sets each packet in a queue for each user, and uses each packet. In order to record a communication flow priority control program for sequentially taking out each packet from the queue based on the communication flow priority order of each packet based on the sender information and sending the packet to an external line on a recording medium, using the recording medium, Can be increased.

Further, the present invention described in claim 6 provides the present invention according to claim 5.
In the described invention, when user information is not set in the packet or when the authentication fails,
The gist is to set the packet in a default queue.

According to the present invention, a communication flow priority control program for setting a packet to a default queue when user information is not set in the packet or when authentication fails. Since the information is recorded on a medium, the distribution of the medium can be improved by using the recording medium.

[0023]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing a configuration of a communication flow priority control device that implements a communication flow priority control method using computer user information according to an embodiment of the present invention. The communication flow priority control device shown in FIG. 1 has host agents (HA) 3a, 3b, 3c arranged in each of the computer terminals 1a, 1b, 1c.

The host agents (HA) 3a, 3
b, 3c are arranged in each of the computer terminals 1a, 1b, 1c, and are configured to set and transmit the user information of each computer terminal 3 to each packet transmitted from each of the computer terminals 1a, 1b, 1c. Have been. The user information only needs to be identification information (ID) that can identify an individual such as an account of each computer terminal 1 or an employee number of the user. This user information is transmitted from the computer terminal 1 via the I
The P packet is set in the TOS (Type of Service) field or the IP option field and transmitted. Further, a security function is required to prevent impersonation and falsification of handling of user information.

Further, the host agent (HA) 3a,
3b and 3c are connected to a LAN arbiter (LA) 5,
The LAN arbiter (LA) 5 is connected to the Internet 15 via an external line 11 and an Internet service provider (ISP) 13.

The LAN arbiter (LA) 5 is connected to a policy server (PS) 7. The policy server (PS) 7 sends an external line 11 from the LAN arbiter (LA) 5 based on the user information set in each packet.
Is a part which determines the communication flow priority of each packet sent to the network administrator 9.
Is to be managed by

The LAN arbiter (LA) 5 is provided at a portion where the network in the LAN is congested, such as an exit of the external line 11 to the Internet service provider (ISP) 13 and a line connected to an in-house database server. As shown in FIG. 2, the packet recognition unit 51 receives each packet transmitted from the host agent (HA) 3 and identifies the input packet. A packet authentication unit (Packet Authe) that authenticates each user based on the information to determine which user sent the packet.
nticator) 53, classifies each packet based on the user information, and sets a plurality of queues 55a, 55b,..., 55m for each user who set the classified packet, and the packets received from the computer terminal 1. The default queue 55n in which the packet is set when the user information is not set in the packet or when the authentication in the packet authentication unit 53 fails, is supplied from the policy server (PS) 7 based on the user information of each packet. Each packet is sequentially queued 55 based on the communication flow priority of each packet.
a, 55b,...
, And a packet scheduler 57 for sending the packet.

Next, the operation of the communication flow priority control device configured as described above will be described.

Each packet from each computer terminal 1 in the host agent (HA) 3 arranged in each computer terminal 1 is transmitted with the user information of each computer terminal 1 set, and each transmitted packet is LAN arbiter (L
A) Received at 5. In the LAN arbiter (LA) 5, the packet authentication unit 53 authenticates which packet is transmitted from which user based on the user information set for each packet, and based on the user information. Queues 55 for each user by classifying each packet
a, 55b, ..., 55m. Also, LAN
The arbiter (LA) 5 supplies the user information of each packet received from the computer terminal 1 to the policy server (PS) 7, and the communication flow of each packet based on the user information from the policy server (PS) 7 Receive priority,
Under the control of the packet scheduler 57 based on the received priority, each packet is sequentially queued 55a,
55m, and is sent to the outside line 11, and further sent from the outside line 11 to the Internet 15 via the Internet Service Provider (ISP) 13.

If the user information is not set in the packet received from the computer terminal 1, or if the authentication by the packet authentication unit 53 fails, the packet is set in the default queue 55n.

Next, an example of use will be described. First, a description will be given of a case where the information is used for adjustment processing of an in-house LAN communication flow.

Regarding the use of the network, it is considered that a packet sent from a user in an important post such as a manager is given the highest priority. By setting the network use authority of a user at an important post to be high, it is possible to preferentially pass the communication flow of this user to an external line.

To realize this, (1) a host agent (HA) 3 is introduced into a computer of a user who is in an important post. (2) A LAN arbiter (LA) 5 is introduced at a connection point of the outside line 11 connected to the Internet service provider 13. (3) The policy server (PS) 7 sets a policy for performing priority processing only on packets of important post users.

The LAN arbiter (LA) 5 preferentially processes packets only for users at important posts,
Packets of other users will enter the default queue 55n. At this time, a desired operation can be realized without requiring management of all user information. As a result, the Internet TV conference communication flow used by the user can be preferentially passed through the external line 11.

Next, as another example of use, a case where the present invention is used for network management will be described.

In the event of a network failure, there is a need to prioritize the communication flow for network recovery. In the priority control process using the management communication flow as a parameter, the management communication flows of all users have priority. Therefore, by introducing a policy that gives top priority to the communication flow only when the network administrator generates a management communication flow at the time of a network failure, network recovery can be performed quickly.

To realize this, (1) a host agent (HA) 3 is installed in a computer of a network administrator. (2) LAN arbiter (LA) 5 for network node
Is introduced. (3) The policy server (PS) 7 sets a policy for giving priority to only the administrator's packet.

In the LAN arbiter (LA) 5, the packet of the network administrator is processed preferentially, and the packets of other users enter the default queue. At this time, since the information of the administrator can be processed only by the ID that can be managed by the LAN arbiter (LA) 5, the target communication flow priority processing can be performed without requiring a unified database of the entire user.

[0039]

As described above, according to the present invention,
User information of each computer terminal is set and transmitted for each packet transmitted from each computer terminal, each transmitted packet is received, each packet is authenticated based on the user information of each packet, and user information is transmitted. Each packet is classified based on each packet and set in a queue for each user, and each packet is taken out of the queue in order based on the communication flow priority of each packet based on the user information of each packet and transmitted to an external line. Therefore, even if a single computer is used by a plurality of users, the communication flow priority processing can be appropriately performed using each user information, without requiring a centralized database as in the related art. In addition, it is possible to perform communication flow priority processing by setting for each computer without requiring unified management of user information.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a configuration of a communication flow priority control device that executes a communication flow priority control method using computer user information according to an embodiment of the present invention.

FIG. 2 is a diagram showing a detailed configuration of a LAN arbiter (LA) used in the communication flow priority control device of FIG. 1;

[Explanation of symbols]

 1a, 1b, 1c Computer terminal 3a, 3b, 3c Host agent (HA) 5 LAN arbiter (LA) 7 Policy server (PS) 11 Outside line 13 Internet service provider (ISP) 15 Internet 51 Packet recognition unit 53 Packet authentication unit 55a ~ 55m queue 55n default queue 57 packet scheduler

Claims (6)

[Claims] A communication flow priority control method for preferentially controlling a communication flow from each computer terminal to an external line and the Internet via an Internet service provider, wherein the communication flow is transmitted from each computer terminal connected to the external line. Setting and transmitting the user information of each computer terminal to each packet to be transmitted, and determining the communication flow priority of each packet transmitted to the external line based on the user information set in each packet; Receives each packet transmitted from each computer terminal with user information set, authenticates which packet is transmitted from which user based on the user information set in each packet, Each packet is classified based on the user information, set in a queue for each user, and determined based on the user information of each packet. A communication flow priority control method using computer user information, wherein each packet is sequentially taken out of the queue based on the communication flow priority order of each packet and transmitted to an external line. 2. The computer user information according to claim 1, wherein, when user information is not set in the packet or when the authentication fails, the packet is set in a default queue. Communication flow priority control method using 3. A communication flow priority control device that preferentially controls a communication flow from each computer terminal to the Internet via an external line and an Internet service provider, wherein the communication flow priority control device is arranged in each computer terminal connected to the external line. A host agent that sets and transmits user information of each computer terminal to a packet transmitted from each computer terminal, and a host agent that transmits each packet transmitted to an external line based on the user information set in each packet. A policy server for determining a communication flow priority order; a policy server that is arranged in a congested portion of a network in a LAN, receives each packet transmitted from the host agent, and receives each packet based on user information set in each packet. Authenticates from which user the packet is sent, and based on the user information And classify each packet into a queue for each user, receive the communication flow priority of each packet from the policy server based on the user information of each packet, and classify each packet based on the priority. And a LAN arbiter for sequentially taking out from the queue and sending out to an external line. 4. The apparatus according to claim 1, further comprising a control unit configured to control to set the packet to a default queue when user information is not set in the packet or when the authentication fails. Item 3. A communication flow priority control device using the computer user information according to item 3. 5. A recording medium storing a communication flow priority control program for preferentially controlling a communication flow from each computer terminal to an external line and an Internet service provider to the Internet, the recording medium being connected to the external line. The user information of each computer terminal is set and transmitted in each packet transmitted from each computer terminal, and the communication flow priority of each packet transmitted to an external line based on the user information set in each packet And receives each packet transmitted from each computer terminal with the user information set, and based on the user information set in each packet, each packet is a packet transmitted from any user. Is authenticated, and each packet is classified based on the user information and set in a queue for each user. Communication flow priority using computer user information, wherein each packet is sequentially taken out of the queue and sent to an external line based on the communication flow priority of each packet determined based on the user information of A recording medium on which a control program is recorded. 6. The computer user information according to claim 5, wherein when no user information is set in the packet or when the authentication fails, the packet is set in a default queue. A recording medium on which a communication flow priority control program using a program is recorded.